Repository navigation
fix(deps): update crypto to resolve Trivy findings - #103
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Upgrade golang.org/x/crypto to v0.55.0 in the root and all five example modules, including required transitive updates.
Verification
Go 1.26.8 lint, test compilation, and all example builds passed. trivy fs --scanners vuln --severity HIGH,CRITICAL --exit-code 1 passed. Full Alpine SSH integration requires the CI fixture and was not run locally.
Classification
Leaf: scoped CI, dependency maintenance, or test compatibility fix.
AI authorship
Codex authored the files listed below. Human line-by-line review: none yet.
_examples/proxy/go.mod_examples/proxy/go.sum_examples/scp/go.mod_examples/scp/go.sum_examples/ssh/go.mod_examples/ssh/go.sum_examples/stream/go.mod_examples/stream/go.sum_examples/writeFile/go.mod_examples/writeFile/go.sumgo.modgo.sumDependency cleanup: ran
GOTOOLCHAIN=go1.26.8 go mod tidyin every root/example module.go mod tidy -diff,go mod verify, andgit diff --checkpassed. Only obsolete/required checksum entries changed; selected dependency versions are unchanged.